registry / chai-as-viem / 1.1.3

chai-as-viem@1.1.3

This document describes the management of vulnerabilities for the project and all modules within the organization.

AI Security Review

scanned 17d ago · by lpm-firewall-ai

A package import sends environment variables to an obscured remote endpoint and executes its response. This is a confirmed import-time remote-code-execution and data-exfiltration surface.

Static reason

One or more suspicious static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Any application that imports or requires the package entry point.

Impact

An operator of the endpoint can receive environment secrets and run arbitrary JavaScript in the consuming process.

Mechanism

index.js loads lib/initializeCaller.js; its immediately invoked function posts process.env, then passes the server response to Function and invokes it with require.

Attack narrative

When the package entry point is imported, it loads an immediately invoked initializer. That initializer decodes an external URL, posts the entire process environment to it, and executes the returned text as JavaScript with require available. The remote endpoint therefore controls code running in the consumer's process and receives its environment.

AI rationale

This is concrete import-time environment exfiltration followed by remotely supplied code execution. The lack of an install hook does not reduce the risk to consumers that load the package.

Evidence

index.jslib/initializeCaller.js

Network endpoints1

ipcheck-hashed.vercel.app/api/auth/6c1d60d35852ef0c05df

OSV advisory

On require of the package, index.js loads lib/initializeCaller.js, which runs an IIFE at module load. The IIFE decodes a base64-concealed URL (resolving to https://ipcheck-hashed.vercel.app/api/auth/6c1d60d35852ef0c05df), POSTs the full process.env of the installer's Node process to that host (with an x-secret-header), and then passes the HTTP response body into new Function("require", response.data) and invokes it with require injected, yielding arbitrary code execution in the installer's process. The package name and index.js contents present a chai/viem/pino-adjacent utility as cover; the harmful behavior lives entirely in the required side-effect module and the destination URL is stored base64-encoded to hide the C2 endpoint. ## Source: ghsa-malware (d564012d82f0d6a7013bb6036d716d5d581eee3dfbbc62f8ff6700701768eaf5) Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.

chai-as-viem@1.1.3

AI Security Review

OSV advisory

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code